This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft File: Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft (raw, json) Hash identifier: MOMRta1vk3eLjZ/kyktP8K0gLPREKXciQQIPghKpq5I= Subject key identifier: B4:C4:62:D5:DE:8E:50:92:54:BB:6B:79:36:85:E2:14:74:A5:67:98 Authority key identifier: 0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92 Certificate issuer: /CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92 Certificate serial: 019B0F6E66ED9683144ACE0D4F58A8FF3AA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft Manifest number: 1776 Signing time: Thu 11 Dec 2025 22:00:52 +0000 Manifest this update: Thu 11 Dec 2025 22:00:52 +0000 Manifest next update: Fri 12 Dec 2025 22:00:52 +0000 Files and hashes: 1: 7i8JH2gDDE50EmzV6j2wTHTOrXc.roa (hash: N1lOwseUmLTmn9OgnciUdbf6hlxuHBxxnuvg8UgK1o8=) 2: Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl (hash: z2bcXrRuyFFL5kQRQ8mV3Jn/X66K+g91OycFh/zIes4=) 3: Q5TavcFKtR_0I79BfhZ4NkPDGaA.roa (hash: EO/fBdrumGLJMFUy0n9hpgnFqYeN6WeBPt+jfe8wV+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 22:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:66:ed:96:83:14:4a:ce:0d:4f:58:a8:ff:3a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92 Validity Not Before: Dec 11 22:00:52 2025 GMT Not After : Dec 12 22:00:52 2025 GMT Subject: CN=b4c462d5de8e509254bb6b793685e21474a56798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:16:a5:ed:bd:76:77:bc:6e:04:62:86:6a:2e: 62:74:c8:0c:30:f2:11:d8:d4:01:49:5d:9b:78:21: be:75:52:68:53:e4:33:42:14:77:06:22:c1:12:99: fe:e0:d9:6f:e0:64:af:93:b8:72:f3:03:ef:e5:f7: b4:ac:e4:5b:ca:2e:7a:79:0e:fe:ca:dd:d3:b3:59: f6:38:43:eb:81:7c:aa:e9:1e:da:11:a4:bc:4b:c4: 08:d4:37:68:5c:cb:f0:b7:c1:38:e6:0e:c4:5c:8e: 49:a6:c0:0a:61:2d:29:77:14:c6:ce:b8:9e:1c:9a: 93:5c:8f:ec:50:9c:25:66:21:6f:df:9e:47:bb:46: 4c:2e:c0:50:2b:0b:0f:bc:ae:63:d2:e6:da:32:71: 32:de:0f:ad:e9:a6:61:8a:eb:0f:49:52:87:91:b1: 91:09:3f:da:e6:f3:9b:2e:a9:39:53:1c:65:d1:ab: 44:48:55:67:f3:2b:fe:6b:1e:7f:c2:e5:f0:20:03: 6c:a9:8c:63:b1:c8:70:97:b2:8b:3e:e2:c9:5c:3f: 88:56:ab:42:0b:e0:95:05:08:ef:7a:3d:3b:9a:e1: 24:dc:51:76:0d:26:f8:d5:bc:2c:1a:5d:7b:c9:d5: 19:7f:21:e3:3e:5e:a4:9f:69:e1:cb:de:e8:9b:7f: 5e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C4:62:D5:DE:8E:50:92:54:BB:6B:79:36:85:E2:14:74:A5:67:98 X509v3 Authority Key Identifier: keyid:0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:62:25:47:46:f3:25:b9:a0:d6:84:4a:3d:89:b5:1f:8b:57: 3a:c4:4e:bc:0d:44:59:3b:bd:56:5c:16:4e:51:ee:90:8d:29: 8f:60:b1:30:b9:5b:d6:0a:b5:ae:9f:d5:63:43:69:1a:50:c6: 19:df:1f:2d:6b:74:7a:1b:bd:88:24:10:39:e3:49:48:6e:71: 04:eb:44:98:b0:4b:4c:69:a9:46:13:b3:91:05:4f:b5:d4:14: d3:fb:c1:1b:2b:be:81:6b:07:84:6b:5b:1c:a5:e0:29:32:ae: 85:0b:42:4a:50:a7:57:d6:71:89:f3:1d:71:3c:e4:e1:68:58: ac:21:2e:64:94:84:3e:68:06:36:8f:76:17:e9:64:87:b3:e1: 63:d5:56:23:b7:92:63:41:68:25:3c:c2:bd:52:bc:04:c5:57: 71:24:27:de:e9:91:f2:19:f2:d1:16:e5:b0:f7:42:6b:03:11: 94:70:75:92:e5:c6:44:e3:c0:fb:e4:fd:bb:22:5d:be:41:f5: 39:89:df:8f:cb:31:c0:f7:60:e9:2c:b2:0f:b5:e2:51:e2:66: c9:bc:a5:c2:ef:63:0d:cb:5e:8c:2a:2a:66:a8:83:6d:9a:c4: b2:bf:f2:a6:82:f1:95:f6:e7:ed:84:99:bd:8a:b4:f6:09:53: ab:af:08:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbmbtloMUSs4NT1io/zqhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMDkxYmRjNjY2YjhhNTk0MzNjNjhkOTBlMGQ4Y2MzN2Fj ZGNlOTIwHhcNMjUxMjExMjIwMDUyWhcNMjUxMjEyMjIwMDUyWjAzMTEwLwYDVQQD EyhiNGM0NjJkNWRlOGU1MDkyNTRiYjZiNzkzNjg1ZTIxNDc0YTU2Nzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhal7b12d7xuBGKGai5idMgMMPIR 2NQBSV2beCG+dVJoU+QzQhR3BiLBEpn+4Nlv4GSvk7hy8wPv5fe0rORbyi56eQ7+ yt3Ts1n2OEPrgXyq6R7aEaS8S8QI1DdoXMvwt8E45g7EXI5JpsAKYS0pdxTGzrie HJqTXI/sUJwlZiFv355Hu0ZMLsBQKwsPvK5j0ubaMnEy3g+t6aZhiusPSVKHkbGR CT/a5vObLqk5Uxxl0atESFVn8yv+ax5/wuXwIANsqYxjschwl7KLPuLJXD+IVqtC C+CVBQjvej07muEk3FF2DSb41bwsGl17ydUZfyHjPl6kn2nhy97om39eMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTEYtXejlCSVLtreTaF4hR0pWeYMB8GA1UdIwQY MBaAFA8JG9xma4pZQzxo2Q4NjMN6zc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHdrYjNHWnJpbGxEUEdqWkRnMk13M3JOenBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iNjQwODMtNTUwZS00Y2FmLWJjMjkt YTM0YThiODA2ODMyLzEvRHdrYjNHWnJpbGxEUEdqWkRnMk13M3JOenBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9iNjQwODMtNTUwZS00Y2FmLWJjMjktYTM0YThiODA2ODMy LzEvRHdrYjNHWnJpbGxEUEdqWkRnMk13M3JOenBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo2IlR0bz Jbmg1oRKPYm1H4tXOsROvA1EWTu9VlwWTlHukI0pj2CxMLlb1gq1rp/VY0NpGlDG Gd8fLWt0ehu9iCQQOeNJSG5xBOtEmLBLTGmpRhOzkQVPtdQU0/vBGyu+gWsHhGtb HKXgKTKuhQtCSlCnV9ZxifMdcTzk4WhYrCEuZJSEPmgGNo92F+lkh7PhY9VWI7eS Y0FoJTzCvVK8BMVXcSQn3umR8hny0RblsPdCawMRlHB1kuXGROPA++T9uyJdvkH1 OYnfj8sxwPdg6SyyD7XiUeJmybylwu9jDctejCoqZqiDbZrEsr/ypoLxlfbn7YSZ vYq09glTq68I7g== -----END CERTIFICATE-----Generated at Fri Dec 12 08:02:26 2025 by rpki-client